» plx_exp.DLL
Overview
Analysis
File Details
Programs (1)

plx_exp.DLL

Plaxo Integration for Windows Mail, Windows Live Mail, and Outlook Express

Plaxo Incorporated

This is installed with Plaxo Toolbar for Windows.

File name:

plx_exp.DLL

Publisher:

Plaxo, Inc. (signed by Plaxo Incorporated)

Product:

Plaxo Integration for Windows Mail, Windows Live Mail, and Outlook Express

Description:

Enables Plaxo to integrate securely with Windows Mail, Windows Live Mail, and Outlook Express

Version:

3.26.0.13

MD5:

c55ef059e11dbbfb414cd8dc5368b92c

SHA-1:

b1c07f4192b74bca692ae3f59e3462799ec44e57

SHA-256:

308cac7fd401b32859a438218ce104178781104e3710f8a6e88935fc2d99e36f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 12:39:51 AM UTC (today)

File size:

609.4 KB (624,008 bytes)

Product version:

3.26.0.13

Original file name:

plx_exp.DLL

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\plaxo\s1hg.1\plx_exp.dll

Digital Signature

Signed by:

Plaxo Incorporated

Authority:

VeriSign, Inc.

Valid from:

6/30/2010 7:00:00 PM

Valid to:

7/8/2011 6:59:59 PM

Subject:

CN=Plaxo Incorporated, OU=Engineering, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Plaxo Incorporated, L=Mountain View, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

32F004C0DBE0C789A4D37ED0CEDBAFFE

File PE Metadata

Compilation timestamp:

4/29/2011 11:17:40 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:WCovTB86Jbp31biZmyhT+/P684julmowh/8++:KKSbpFbymyh+kulmoh++

Entry address:

0x4F666

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 20, 04, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 30, 5B, 08, 22, 89, 0D, 2C, 5B, 08, 22, 89, 15, 28, 5B, 08, 22, 89, 1D, 24, 5B, 08, 22, 89, 35, 20, 5B, 08, 22, 89, 3D, 1C, 5B, 08, 22, 66, 8C, 15, 48, 5B, 08, 22, 66, 8C, 0D, 3C, 5B, 08, 22, 66, 8C, 1D, 18, 5B, 08, 22, 66, 8C, 05, 14, 5B, 08, 22, 66, 8C, 25, 10, 5B, 08, 22, 66, 8C, 2D, 0C, 5B, 08, 22, 9C, 8F, 05, 40, 5B... 
[+]

Entropy:

6.2183

Code size:

391.5 KB (400,896 bytes)

The file plx_exp.DLL has been discovered within the following program.

Plaxo Toolbar for Windows by Plaxo Incorporated

Publisher's description - “With the Plaxo Toolbar for Internet Explorer, you'll always have your address book and calendar right at your fingertips. Yahoo! users can even get their address books synched with the Plaxo Network to always have the most up-to-date info right in their address books.”

58% remove it

Scan plx_exp.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.